Managing Windows Server 2003 and Active Directory Best Practices

Tanin Noirungsee Technology Specialist Microsoft (Thailand)

What we will cover:

Active Directory operations and tasks DHCP operations and tasks DNS operations and tasks WINS operations and tasks Best Practices:

Guide for Securing Windows Server Active Directory Installations Windows Server 2003 Active Directory Branch Office

Agenda

Active Directory Operations DHCP Operations DNS Operations WINS Operations Best Practices:

Guide for Securing Windows Server Active Directory Installations Windows Server 2003 Active Directory Branch Office

Active Directory Operations

Microsoft Operations Framework - MOF
Service Level Management Financial Management Service Continuity Mgmt Availability Management Capacity Management Workforce Management Change Management Configuration Mgmt Release Management

Service Desk Incident Management Problem Management

System Administration Security Administration Service Monitoring and Control Job Scheduling Network Administration Directory Services Administration Print Output Mgmt Storage Management

Active Directory Operations

MOF Team Model and Functional Roles
Change management Release/systems engineering Configuration control/asset management Software distribution/licensing Quality assurance Release

Intellectual property protection Network and system security Virus and intrusion detection Audit and compliance admin Contingency planning

Enterprise architecture Infrastructure engineering Capacity management Cost/IT budget mgmt Resource and long range planning

Security

Infrastructur e

Partner

Support

Maintenance vendors Environment support Managed services outsourcers Managed services trading partners Software/hardware suppliers

OperatIons Messaging operations Database operations Network administration Monitoring metrics Availability management

Service desk/help desk Production/production support Problem management Service level management

Active Directory Operations

Operating Quadrant Processes

Daily

Back up Active Directory

As needed

Restore Active Directory Manage a SYSVOL Manage Sites Recover a domain controller through reinstallation As needed

Security

Active Directory Operations

Optimizing Quadrant Processes

Availability management

As needed

Managing the Active Directory database Adding a Global Catalog Managing the Windows Time Service Managing trusts

Capacity management

As needed

Removing Global Catalog Reducing workload on PDC emulator

Active Directory Operations

Changing Quadrant

Release Management

As needed

Installing a domain controller for an existing domain

Change Management

As needed

Removing Active Directory

demonstration
Active Directory Operations
Managing Windows Time Service Managing the SYSVOL Reducing Workload on the PDC Emulator Choosing Standby Operations Master Transferring to the Standby Operations Master Role

Agenda

Active Directory Operations DHCP Operations DNS Operations WINS Operations Best Practices:

Guide for Securing Windows Server Active Directory Installations Windows Server 2003 Active Directory Branch Office

DHCP Operations
Operating Quadrant Processes

Daily

Data backup Service monitoring and control Storage resource management

Weekly

As needed

Data backup, restore and recovery

DHCP Operations
Support Quadrant Processes

Daily

Classification and initial support Investigation and diagnosis Investigation and diagnosis

Weekly

As needed

Problem management

DHCP Operations
Optimizing Quadrant Processes

Monthly

Managing resource and service performance

Capacity management

Monitoring Analyzing Performance tuning Reporting

DHCP Operations
Changing Quadrant Processes

Daily

Change classification

Monthly

Configuration management

Address pool exclusions Lease durations Reservations

demonstration
DHCP Operations
Data Backup, Restore and Recovery Monitoring Proactive Analysis and Review

Agenda

Active Directory Operations DHCP Operations DNS Operations WINS Operations Best Practices:

Guide for Securing Windows Server Active Directory Installations Windows Server 2003 Active Directory Branch Office

DNS Operations
Operating Quadrant Processes

Daily

Perform monitoring Data backup Storage resource management

Weekly

As needed

Data backup, restore and recovery

DNS Operations
Support Quadrant Processes

Daily

Proactive analysis and review

Weekly

Proactive analysis and review

Incident closure Problem recording and classification

Monthly

As needed

DNS Operations
Optimizing Quadrant Processes

Daily

Managing resource and service performance

Monthly

Managing resource and service performance

Design for recovery

As needed

DNS Operations
Changing Quadrant Processes

Daily

Change classification and authorization

Weekly and Monthly

Review configuration items

demonstration
DNS Operations
Reviewing Configuration Items Data Backup, Restore and Recovery Managing Resources and Service Performance Proactive Analysis and Review

Agenda

Active Directory Operations DHCP Operations DNS Operations WINS Operations Best Practices:

Guide for Securing Windows Server Active Directory Installations Windows Server 2003 Active Directory Branch Office

WINS Operations
Operating Quadrant Processes

Daily

Data backup Proactive analysis and review Storage resource management

Weekly

As needed

Data backup, restore and recovery

WINS Operations
Support Quadrant Processes

Daily

Investigation and diagnosis Proactive analysis and review Investigation and diagnosis

Weekly

WINS Operations
Optimizing Quadrant Processes

Monthly

Managing resources and server performance

Capacity management

Monitoring Analyzing Performance tuning Reporting

WINS Operations
Changing Quadrant Processes

Daily

Change classification and authorization

Monthly

Reviewing configuration items

demonstration
WINS Operations
Reviewing Configuration Items Data Backup, Restore and Recovery Proactive Analysis and Review

Agenda

Active Directory Operations DHCP Operations DNS Operations WINS Operations Best Practices:

Guide for Securing Windows Server Active Directory Installations Windows Server 2003 Active Directory Branch Office

For More Information

Microsoft Solutions for Management

www.microsoft.com/business/reducecosts/efficie ncy/manageability/default.mspx

Microsoft Service Product Operations Guides

www.microsoft.com/technet/itsolutions/techguide /msm/winsrvmg/default.mspx

Best Practices: Guide for Securing

Active Directory Installations

Planning In-Depth Active Directory Security Establishing Secure Active Directory Boundaries Deploying Secure Domain Controllers Strengthening Domain and Domain Controller Policy Settings Establishing Secure Administrative Practices Securing DNS

Best Practices: Guide for Securing

Active Directory Installations

ADSecurity2003.doc Link: http://www.microsoft.com/windowsserve r2003/techinfo/overview/adsecurity.msp x

Best Practices: Windows Server

2003 Active Directory Branch Office

Planning for Active Directory Deployment in a Branch Office Environment Part I. 6 chapters

Active Directory branch office planning process and provide recommendations on how to go about it. Technical background information to help you understand the rationale for implementing your branch office design.

Deploying Active Directory in a Branch Office Environment Part II. 8 Chapters

Procedures necessary to deploy Active Directory in your branch office environment. Scripts and updated utilities that you can use during the deployment process. Significantly simplify some of the operations used in the deployment process outlined in this guide.

Scripts and Utilities

Best Practices: Windows Server

2003 Active Directory Branch Office

adbodg03.exe (self-extract zip file) Link: http://www.microsoft.com/downloads/de tails.aspx?FamilyId=9353A4F6-A8A840BB-9FA73A95C9540112&displaylang=en

Session Summary

MSM is a combination of best practices to help customers achieve operational excellence MOF includes how to plan and deploy and maintain IT operational processes Each Team role has specific functions and goals in the MOF Each function and goal plays a key role to success